https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T23:31:20.466692+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2009-3086 CVE-2009-3086 2026-10-01T23:31:20.468402+00:00

A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.

 https://db.gcve.eu/vuln/ghsa-fg9w-g6m4-557j GHSA-fg9w-g6m4-557j — actionpack and activesupport vulnerable to information leaks 2026-10-01T23:31:20.468465+00:00

Affected: RubyGems: actionpack, RubyGems: activesupport

A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.